Quantum Lab

Run the /home/bram/work/quantum_lab Python scripts and demos inside the existing venv ~/.venvs/qiskit. Use when asked (e.g., via Telegram/OpenClaw) to run quant_math_lab.py, qcqi_pure_math_playground.py, quantum_app.py subcommands, quantumapp.server, or notebooks under the repo.

This skill runs code from a local repository inside a local Python virtualenv. Before installing or invoking it: 1) Verify the repository contents (quantum_lab) are trustworthy — running these commands executes code on your machine. 2) Be cautious when allowing remote triggers (Telegram/OpenClaw): an attacker who can send commands could make the skill run arbitrary Python in your environment. 3) Note that running the suggested `pip install -r requirements.txt` will download packages from PyPI into the venv — review requirements first. 4) If you want extra safety, run the repo in an isolated environment (a separate, minimal venv or container) or audit the scripts in the repo before use.

Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill Suspicious High-Entropy/Eval files: 1 The `scripts/qexec.sh` script uses `exec "$@"`, allowing arbitrary command execution within the activated virtual environment and specified root directory. While the `SKILL.md` instructs the agent to use this for `python` and `pip install` commands, the underlying mechanism is broad. The `SKILL.md` also explicitly allows `pip install -r requirements.txt`, which can fetch and execute arbitrary code from package repositories, posing a supply chain risk. These capabilities, though potentially legitimate for the skill's stated purpose, introduce significant risk without clear evidence of intentional malicious behavior.